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(54) Data nullification device for nullifying digital content recorded on a recording medium 



(57) A data nullification device for nullifying target 
data recorded on a recording medium Is provided. The 
target data Is made up of a plurality of data blocks. A 
judging unit (11 1 ) judges, in units of data blocks, whether 
the target data needs to be nullified. A nullifying unit nul- 
lifies, when apredetemnined number of data blocks are 
judged as needing to be nullified or when one or more 
data blocks whose total amount of data reaches a pre- 
determined amount are judged as needing to be nulli- 
fied, the judged data blocks. 
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Description 

[0001 1 This application is based on an application No. 
2001-039140 filed In Japan, the contents of which are 
hereby Incorporated by reference. 5 

BACKGROUND OF THE INVENTION 
Field of the Invention 

10 

[0002] The present invention relates to a device for 
nullifying data to protect its copyright, and in particular 
relates to techniques for enhancing user convenience 
while protecting copyrighted data. 

15 

Related Art 

[0003] The digitization of Information Is Increasing In 
recent years. Since digitized infomnatlon (hereafter re- 
ferred to as "digital content") not only is relatively easy 20 
to handle but also does not degrade In quaiity with tlme» 
Infonnation such as audio and video data Is becoming 
more and more digitized. 

[0004] On the other hand, digital content can be cop- 
ied perfectly with no decrease in quality. This provokes 25 
unauthorized acts such as illegal duplication or tamper- 
ing of copyrighted information. 
[0005] To discourage such unauthorized acts, a meth- 
od may be employed that encrypts digital content, and 
provides a decryption l<6y for decrypting the encrypted 30 
digital content (hereafter simply referred to as "encrypt- 
ed content") only to devices of authorized users who 
have agreed to pay a usage fee to the copyright holder. 
[0006] This prohibits the encrypted content from be- 
ing decrypted using devices other than those of the au- ss 
thorized users. Hence the digital content can be protect- 
ed from unauthorized use. 

[0007] Also, there is a method for indicating the cop- 
yright protection status of digital content. According to 
this method, copy control infonnation (GCI) that shows 40 
whether copying of the digital content is pennltted or not 
is attached to the digital content. 
[0008] In more detail , the copy control infonnation car- 
ries one of the four instmctions "Copy Never, "Copy one 
Generation", "Copy No more", and "Copy Free". 45 
[0009] "Copy Never means no copies of digital con- 
tent are pemriltted. 

[0010] "Copy one Generation" means only a first gen- 
eration copy of digital content is permitted. The first gen- 
eration copy of the digital content is given copy control so 
Infonnation "Copy No more". 

[0011] "Copy No more" Is copy control Information 
that Is attached to digital content which is a first gener- 
ation copy of digital content whose copy control Infor- 
mation is "Copy one Generation". "Copy No more" 55 
means copying is not permitted any more though it was 
previously. 

[0012] "Copy Free" means digital content can be cop- 
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led freely. 

[001 3] In commercial digital broadcasting and the lil<e, 
digital content is transmitted via a transmission line In 
the following manner If the copy control infonnation of 
the digital content Is "Copy Never, "Copy one Genera- 
tion", or "Copy No more". It is definitely transmitted in an 
encrypted form, to ensure security on the transmission 
line. If the copy control information of the digital content 
is "Copy Free", it is usually transmitted in an unencrypt- 
ed form. 

[0014] When the user obtains digital content whose 
copy control infonnation is "Copy Never via a transmis- 
sion line and reproduces it. the user is prohibited from 
copying the obtained digital content to a recording me- 
dium. Also, when the user obtains digital content whose 
copy control Information Is "Copy one Generation" and 
records It onto a recording medium thereby generating 
digital content whose copy control infonnation is "Copy 
No more", the user cannot copy the digital content re- 
corded on the recording medium to another recording 
medium. In sucii cases where copying of digital content 
is completely prohibited, the user is likely to encounter 
a lot of Inconveniences. 

[0015] if copying of digital content transmitted via a 
transmission line is pennitted, the user can perform time 
shifting. I.e.. the user can record the digital content to a 
recording medium for later reproduction, or the user can 
record the digital content to a recording medium such 
as an HDD (hard dlsl< drive) and at the same time re- 
produce it. However, in the case of digital content 
marked as "Copy Never, once the user breaks off view- 
ing the digital content to go to the bathroom or to answer 
the telephone or bell, he or she cannot view the missed 
part unless the digital content is rebroadcast. Many 
movie films run for about two hours, and some feature 
length films even run for more than four hours. Also, 
commercial digital broadcasting and the like are usually 
commercial-free. Therefore, to view an entire movie film 
or the like whrch is marked as "Copy Never", the user 
cannot answer the phone or bell and cannot even go to 
the bathroom for the running time of the movie film that 
lasts two to four hours. This causes a great deal of In- 
convenience to the user. 

[0016] Also, if copying of digital content is still pennlt- 
ted after the user acquires the digital content and 
records it to a recording medium, the user can freely 
copy or move the recorded digital content to another re- 
cording medium. However, in the case of digital content 
marked as "Copy one Generation", once the user has 
acquired the digital content and recorded it onto some 
recording medium, the user cannot move that digital 
content to another recording medium. Since it Is con- 
venient to use a fixed recording medium such as an 
HDD that is easy to use and quick to access, the user 
is likely to record the acquired digital content first of all 
to such a fixed recording medium. However, fixed re- 
cording media have only limited capacities. Also, gen- 
eral fixed recording media such as HDDs are more sus- 
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ceptlbte to breakage than removable recording media, 
as they tend to be constantly used. For these reasons ^ 
if the user views the digital content and wants to store 
It long-term, It is desirable to move the digital content to 
a removable recording medium, such as a DVD-RW or 
a digital videotape, that has a larger capacity and s 
more preferable for long-term storage. 
[0017] However, It is not acceptable, In terms of cop- 
yright protection, to alter the non-copyable status of the 
copyrighted digital content so as to improve user-friend- 
liness. 

[0016] Under copyright protection, digital content 
whose copy control Information Is "Copy Never" can be 
viewed but cannot be copied, whilst digital content 
whose copy control Infomnatlon Is "Copy one Genera- 
tion" can be copied only once. 

[0019] In view of this, It is desirable to allow copying 
of digital content under a specific condition but then re- 
liably nullify the digital content. In this way, user-friend- 
liness can be Improved without departing from the prin- 
ciple of copy prohibition. 

SUMMARY OF THE INVENTION 

[0020] The present Invention has an object of provid- 
ing a data nullification device, a data nuiilfication meth- 
od, a data nullification program, and a computer-reada- 
ble recording medium recording a data nullification pro- 
gram which enable user-friendliness to be improved 
without departing from the principle of copy prohibition. 
[0021 ] The stated object can be achieved by a data 
nullification device for nullifying target data recorded on 
a recording medium, the target data being made up of 
a plurality of data blocks, the data nullification device 
Including: a Judging unit operable to judge, for each data 
block recorded on the recording medium, whether the 
data block needs to be nullified; and a nullifying unit op- 
erable to nullify, when a predetemnined number of data 
blocks are Judged as needing to be nullified or when one 
or more data blocks whose total amount of data reaches 
a predetermined amount are judged as needing to be 
nullified, the judged data blocks. 

[0022] With this construction, when a predetermined 
number of data blocks satisfy a specific condition or one 
or more data blocks whose total amount of data reaches 
a predetermined amount satisfy the specific condition, 
the data blocks are nullified. 

[0023] According V, when the target data Is marked as 
"Copy Never" or "Copy No more", a copy can be made 
but then the copy or the original Is reliably nullified. In 
this way, user-friendliness can be improved without de- 
parting from the principle of copy prohibition. 
[0024] Also, since the target data Is nullified In a pre- 
determined data unit, even If an unauthorized user tries 
to obtain the copy by powering o^ the device halfway 
through the operation, he or she cannot obtain the whole 
target data. By employing an appropriate data unit for 
the nullification, security can be Improved. 



[0025] Here, the recording medium may store se- 
quence Infonnation that shows a sequence In which the 
plurality of data blocks were recorded onto the recording 
medium, wherein thejudging unit Judges, In succession. 

^ the plurality of data blocks In the sequence shown by 
the sequence Information, as needing to be nullified. 
[0026] With this construction, the plurality of data 
blcx^ks are Judged, in the recording sequence, as need- 
ing to be nullified. 

10 [0027] This allows only new data to be retained on the 
recording medium. 

[0028] Here, the target data may be data which is con- 
tinuously transmitted from an external device and re- 
corded on the recording meditm, wherein the data nul- 

f 5 llflcatlon device further Includes: a receiving unit opera- 
ble to receive data from the external device, and having 
set the received data as a new data block, the nullifying 
unit writes the new data block to a recording area on the 
recording medium that stores a data block which is 

20 judged as needing to be nullified, to nullify the recorded 
data block and at the same time record the new data 
block. 

[0029] With this construction, the new data block Is 
written to the recording area of the old data block which 

2S is Judged as needing to be nullified. 

[0030] In other words, recording the new data block 
has the effect of nullifying the old data block. According- 
ly, the load on the device hardly increases despite the 
execution of the nullification. 

30 [0031] Here, each data block may have a length cor- 
responding to a fixed transmission time period, wherein 
a specified number of recording areas which are each 
used as a recording area of a data block are reserved 
on the recording medium. 

35 [0032] With this construction, the specified number of 
recording areas each for recording data of the fixed 
transmission time period is reserved on the recording 
medium. 

[0033] Here, if the length corresponding to the fixed 
40 transmission time period is variable and if part of the 
recorded data block remains even after the new data 
block Is written, the nullifying unit may further write ar- 
bitrary data over the part of the recorded data block. 
[0034] With this construction, arbitrary data is written 
45 over the part of the old data block which was not de- 
stroyed by the overwriting with the new data block. 
[0035] This enables the whole old data block to be de- 
stroyed. 

[0036] Here, if there is not a new data block which is 
50 to be recorded, the nullifying unit may wr te arbitrary da- 
ta to the recording area. 

[0037] With this construction, even when there is not 
a new data block, arbitrary data Is written over each old 
data block. 

55 [0038] This enables each old data block to be de- 
stroyed. 

[0039] Here, the recording medium may store time 
limit Infomnatlon showing a recording time limit of each 
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data block recorded on the recording medium, the re- 
cording time limit being a time limit after which retention 
of the data block on the recording medium Is prohibited, 
wherein the judging unit Judges that each data block 
whose recording time limit Is reached needs to be nulli- 
fied, based on the t me limit information, and whenever 
any data block is judged as needing to k>e nullified be- 
cause a recording time limit of the data block is reached, 
the nullifying unit nullifies the data block Irrespective of 
whether the predetennlned number of data blocks are 
judged as needing to be nullified or whether one or more 
data blocks whose total amount of data reaches the pre- 
determined amount are Judged as needing to be nulli- 
ried. 

[0040] With this construction, each data block whose 
recording time limit Is reached is Judged as needing to 

be nullified. 

[0041] Since each data block is nullified based on its 
recording time limit, it is possible to make such setting 
that gives a priority to each data block. This Increeises 
flexibility. 

[0042] Here, the data nullification device may further 
Include: a utilizing unit operable to utilize the target data 
recorded on the recording medium, In units of data 
blocks, wherein the judging unit further judges that each 
data block which was utilized by the utilizing unit needs 
to be nullified. 

[0043] With this construction, each utilized data block 
is Judged as needing to be nullified. 
[0044] This improves user-friendliness without de- 
parting from the principle of copy prohibition. 
[0045] IHere, the data nullification device may further 
Include: a utilizing unit operable to utilize the target data 
recorded on the recording medium, In units of data 
blocks, wherein the judging unit Judges that each data 
block which was utilized by the utilizing unit needs to be 
nullified. 

[0046] With this construction, each utilized data block 

Is Judged as needing to be nullified. 

[0047] Since each data block which was reproduced, 

copied, or moved is nullified, user-frlendllness can be 

Improved without departing from the principle of copy 

prohibition. 

[0046] Here, the target data may be content data 
which is transmitted from an external device and record- 
ed on the recording medium, wherein the content data 
is accompanied with copy control information showing 
whether copying of the content data Is pemnitted or pro- 
hibited, the utilizing unit reproduces the content data re- 
corded on the recording medium, In units of data blocks, 
and only If the copy control Information accompanying 
the content data shows that the copying of the content 
data Is prohibited, the judging unit judges that each data 
block which was reproduced by the utilizing unit needs 
to ba nullifrad. 

[0049] With this construction, if the copy control infor- 
mation shows that the copying of the content data Is pro- 
hibited, each reproduced data block Is ;udged as need- 



ing to be nulilfied. 

[0050] In other words, when the content data Is "Copy 
Never", a copy of the content data is allowed but then 
the copy Is reliably nulilfied. 

5 [0051] Here, the target data may be accompanied 
with copy control Information showing whether copying 
of the target data is permitted or prohibited, wherein the 
utillzlrg un t records the target data recorded on the re- 
cording medium, to another recording medium. In units 

10 of data blocks, and only If the copy control information 
accompanying the target data shows that the copying 
of the target data is prohibited, the Judging unit judges 
that each data block on the recording medium which 
was recorded by the utilizing unit needs to be nullified. 

t5 [0052] With this construction, if the copy control Infor- 
mation shows that the copying of the content oata Is pro- 
hibited, each copied data block is Judged as needing to 
be nullified. 

[0053] in other words, when the content data is "Copy 
20 No more" , a second generation copy of the content data 
is allowed but then a first generation copy of the content 
data is reliably nullified. 

[0054] Here, the nullifying unit may destroy ail parts 
of a data block which Is Judged as needing to be nullified. 

25 [0055] With this construction, ail parts of the data 
block Judged as needing to be nullified are destroyed. 
[0056] This enhances security. 
[0057] Here, the nullifying unit may destroy at least a 
part of a data block which is Judged as needing to be 

so nullified, the part of the data block being necessary to 
utilize remaining parts of the data block. 
[0058] With this construction, at least the part of the 
data block which is needed to utilize the other parts of 
the data block is destroyed. 

35 [0059] This makes the data block unusable while min- 
imizing the Increase In the load of the device. 
[0060] Here, the target data may be MPEG data in- 
cluding I pictures, wherein the part of the data block nec- 
essary to utilize the remaining parts of the data block is 

^0 an I picture. 

[0061] With this construction, the part of the data 
block which is needed to utilize the other parts of the 
data block is an I picture in MPEG data. 
[0062] B pictures and P pictures cannot be utilized if 

45 the 1 picture which these B pictures and P pictures refer 
to Is destroyed. By destroying only the I picture while 
leaving the B and P pictures as they are, the Increase 
In the load of the device Is reduced. 
[0063] Here, the target data may be MPEG data in- 

50 eluding I pictures, wherein the part of the data block nec- 
essary to utilize the remaining parts of the data block is 
a first sector of an 1 picture. 

[0064] With this construction, the part of the data 
block which Is needed to utilize the other parts of the 
55 data block is the first sector of the 1 picture. 

[0065] This makes it impossible to properly reproduce 
the I picture, so that the remaining B and P pictures can- 
not be reproduced. Thus, by destroying only the first 
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sector of the I picture, the Increase in the load of the 
device can be reduced. 

[0066] Here, when the data nullification device does 
not have an enough process ng capacity, the nullifying 
unit may destroy only the part of the data blocl( neces- 
sary to utilize the remaining parts of the data b!ocl<. 
[0067] With this construction, when there ts not an 
enough processing capacity, only the part of the data 
blocic which is needed to utilize the other parts is de- 
stroyed. 

[0066] This enhances security without Increasing the 
load of the device. 

[0069] Here, the nulilfying unit may destroy the re- 
maining parts of the data block within a range where a 
processing capacity of the data nullification device al- 
lows. 

[0070] With thisconstructlon, the other parts of the da- 
ta block are destroyed within a range where the process- 
ing capacity of the device allows. 
[0071 ] This enhances security without Increasing the 
load of the device. 

[0072] Here, the data nullification device may further 
Include: a destroying unit operable to destroy remaining 
parts of data blocks which were not destroyed by the 
nulilfying unit, when the data nullification device has an 
enough processing capacity. 

[0073] With this construction, when there is an 
enough processing capacity, remaining parts of data 
blocks which were not destroyed by the nullifying unit 
are all destroyed. 

[0074] This enhances security without increasing the 
load of the device. 

[0075] Here, each data block recorded on the record- 
ing medium may be encrypted using an individual en- 
cryption key, wherein a decryption key for decrypting the 
encrypted data block is stored on the recording medium, 
and the nullifying unit destroys at least a decryption key 
corresponding to a data block which Is Judged as need- 
ing to be nullified. 

[0076] With this construction, at least the decryption 
key corresponding to the data block Is destroyed. As a 
result, the data block remaining on the recording medi- 
um becomes unusable, since the data block cannot be 
decrypted without the decryption key. 
[0077] Thus, the data block is made unusable with a 
minimum increase in the load of the device. 
[0078] Here, the data nullification device may further 
Include: an acquiring unit operable to acquire the target 
data in an encoded form; a decoding unit operable to 
decode the encoded target data using a user key which 
has been provided to authorized users In advance, to 
obtain the target data; a key generating unit operable to 
generate an arbitrary encryption key and a decryption 
key corresponding to the encryption key, for each data 
block of the target data; a data encrypting unit operable 
to encrypt the data block using the encryption key so 
that the encrypted data block can be decrypted using 
the corresponding decryption key; a key encrypting unit 



operable to encrypt the decryption key using an Identi- 
fier unique to the data nullification device; and a record- 
ing unit operable to record the encrypted data block and 
the encrypted decryption key onto the recording medl- 
5 um. 

[0079] With this construction, the encoded target data 
Is decoded using the user key, and each data block of 
the decoded target data Is encrypted using an encryp- 
tion key. Further, a decryption key corresponding to the 
10 encryption key Is encrypted using an identifier unique to 
the device, and the encrypted data block and the en- 
crypted decryption key are recorded onto the recording 
medium. 

[0080] Since the encrypted decryption key cannot be 
IS decrypted without the identifier unique to the device and 
so cannot be used by other devices, security can be en- 
hanced. 

[0081] Here, at least the decoding unit, the key gen- 
erating unit, the data encrypting unit, and the key en- 
20 crypting unit may be contained In a single semiconduc- 
tor chip. 

[0082] With this construction, the decoding unit, the 
key generating unit, the data encrypting unit, and the 
key encrypting unit can be contained in the same sem- 
25 iconductor chip. This keeps the target data in an unen- 
crypted form from being transferred over wiring of a cir- 
cuit board. 

[0083] In Other words, an unauthorized user cannot 
retrieve the unencrypted target data during the opera- 

30 tlon. This enhances security. 

[0084] The stated object can also be achieved by a 
data nullification program for nullifying target data re- 
corded on a recording medium, the target data being 
made up of a plurality of data blocks, the data nullifica- 

55 tlon program having a computer execute the steps of: 
Judging, for each data block recorded on the recording 
medium, whether the data block needs to be nullified; 
and nullifying, when a predetermined number of data 
blocks are Judged as needing to be nullified or when one 

40 or more data blocks whose total amount of data reaches 
a predetennlned amount are Judged as needing to be 
nullified, the Judged data blocks. 

[0085] With this construction, when a predetermined 
number of data blocks satisfy a specific condition or one 
45 or more data blocks whose total amount of data reaches 
a predetermined amount satisfy the specific condition, 
the data blocks are nullified. 

[0086] Accordingly, when the target data is marked as 
"Copy Never" or "Copy No more", a copy can be made 

50 but then the copy or the original is reliably nullified, in 
this way, user-friendilness can be Improved without de- 
parting from the principle of copy prohibition. 
[0087] Also, since the target data is nullified in a pre- 
determined data unit, even If an unauthorized user tries 

55 to obtain the copy by powering off the device halfway 
throu gh the operatk)n , he or she can not obtain th a whole 
target data. By employing an appropriate data unit for 
the nullification, security can be improved. 
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[0066] Here, the recording medium may store se- 
quence Infomiatlon that shows a sequence In which the 
plurality of data blocks were recorded onto the recording 
medium, wherein the Judging step Judges, in succes- 
sion, the plurality of data blocks In the sequence shown 
by the sequence infomnation, as needing to be nullified. 
[0069] With this construct on, the plurality of data 
blocks are Judged, in the recording sequence, as need- 
ing to be nullified. 

[0090] This allows only new data to be retained on the 
recording medium. 

[0091 ] Here, the target data may be data which is con- 
tinuously transmitted from an external device and re- 
corded on the recording medium, wherein the data nul- 
lification program further having the computer execute 
the step of: receiving data from the external device^ and 
having set the received data as a new data block, the 
nullifying step writes the new data block to a recording 
area on the recording medium that stores a data block 
which is Judged as needing to be nullified, to nullify the 
recorded data block and at the same time record the 
new data block. 

[0092] With this construction, the new data block is 

written to the recording area of the old data block which 
is judged as needing to be nullified. 
[0093] in other words, recording the new data block 
has the effect of nullifying the old data block. According- 
ly, the load on the device hardly increases despite the 
execution of the nullification. 

[0094] l-iere, the recording medium nnay store time 
limit infomnation showing a recording time limit of each 
data block recorded on the recording medium, the re- 
cording time limit being a time limit after which retention 
of the data block on the recording medium Is prohibited, 
wherein the Judging step Judges that each data block 
whose recording time limit is reached needs to be nulli- 
fied, based on the time limit information, and whenever 
any data block Is Judged as needing to be nullified be- 
cause a recording time limit of the data block Is reached, 
the nullifying step nullifies the data btock Irrespective of 
whether the predetennlned number of data blocks are 
Judged as needing to be nullified or whether one or more 
data blocks whose total amount of data reaches the pre- 
determined amount are judged as needing to be nulli- 
fied. 

[0095] With this construction, each data block whose 
recording time limit Is reached Is Judged as needing to 
be nullified. 

[0096] Since each data block is nullified based on its 
recording time limit, it is possible to make such setting 
that gives a priohty to each data block. This increases 
ftextblllty. 

[0097] Here, the data nullification program may fur- 
ther have the computer execute the step of: utilizing the 
target data recorded on the recording medium, in units 
of data blocks, wherein the Judging step further Judges 
that each data block which was utilized in the utilizing 
step needs to be nullified. 



[0098] With this construction, each utilized data block 
Is Judged as needing to be nullified. 
[0099] This Improves user-friendliness without de- 
parting from the principle of copy prohibition. 

9 [0100] Here, the data nullification program may fur- 
ther have the computer execute the step of: utilizing the 
target data recorded on the recording medium, in units 
of data blocks, wherein the Judging step Judges that 
each data block which was utilized In the utilizing step 

10 needs to be nu I If led. 

[0101] With this construction, each utilized data block 
Is Judged as needing to be nullified. 
[0102] Since each data block which was reproduced, 
copied, or moved Is nullified, user-friendliness can be 
t5 Improved without departing from the princip e of copy 
prohibition. 

[0103] Here, the nullifying step may destroy all parts 
of a data block which is Judged as needingto be nullified. 
[0104] With this construction, all parts of the data 
block Judged as needing to be nullified are destroyed. 
[0105] This enhances security. 
[0106] Here, the nullifying step may destroy at least a 
part of a data block which is Judged as needing to be 
nullified, the part of the data block being necessary to 
utilize remaining parts of the data block. 
[0107] With this construction, at east the part of the 
data block which Is needed to utilize the other parts of 
the data block is destroyed. 

[0108] This makes the data block unusable while min- 
imizing the increase in the load of the device. 
[0109] Here, each data block recorded onthe record- 
ing medium may be encrypted using an individual en- 
cryption key, wherein a decryption key for decrypting the 
encrypted data block is stored on the recording medium, 
and the nullifying step destroys at least a decryption key 
corresponding to a data block which is Judged as need- 
ing to be nullified. 

[0110] With this construction, at :east the decryption 
key corresponding to the data block is destroyed. As a 
result, the data block remaining on the recon:flng medi- 
um becomes unusable, since the data block cannot be 
decrypted without the decryption key. 
[01 11] Thus, the data block is made unusable with a 
minimum increase in the load of the device. 
[0112] The stated object can also be achieved by a 
data nullification method for nullifying target data record- 
ed on a recording medium, the target data being made 
up of a plurality of data blocks, the data nullification 
method including the steps of: Judging, for each data 
block recorded on the recording medium, whether the 
data block needs to be nullified; and nuiilfying, when a 
predetermined number of data blocks are judged as 
needing to be nullified or when one or more data blocks 
whose total amount of data reaches a predetermined 
anrK>unt are judged as needing to be nullified, the judged 
data blocks. 

[0113] With this construction, when a predetermined 
number of data blocks satisfy a specific condition or one 
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or more data blocks whose total amount of data reaches 
a predetermined amount satisfy the specific condition, 
the data bloclcs are nullified. 

[01 14] Accordingly, when the target data is marked as 
"Copy Nevef' or "Copy No more", a copy can be made 
but then the copy or the original is reliably nullified. In 
this way. user-friendliness can be improved without de- 
parting from the principle of copy prohibition. 
[0115] Also, since the target data is nullified In a pre- 
determined data unit, even If an unauthorized user tries 
to obtain the copy by powering off the device halfway 
through the operation, he or she cannot obtain the whole 
target data. By employing an appropriate data unit for 
the nullification, security can be Improved. 
[0116] Here, the recording medium may store se- 
quence information that shows a sequence in which the 
plurality of data blocks were recorded onto the recording 
medium, wherein the Judging step Judges, In succes- 
sion, the plurality of data blocks in the sequence shown 
by the sequence infomnation, as needing to be nullified. 
[0117] With this construction, the plurality of data 
blocks are judged, In the recording sequence, as need- 
ing to be nullified. 

[01 18] ~^is allows only new data to be retained on the 
recording medium. 

[0119] Here, the target data may be data which Is con- 
tinuously transmitted from an external device and re- 
corded on the recording medium, wherein the data nul- 
lification method further including the step of: receiving 
data from the external device, and wherein having set 
the received data as a new data block, the nullifying step 
writes the new data block to a recording area on the re- 
cording medium that stores a data block which is Judged 
as needing to be nullified, to nullify the recorded data 
block and at the same time record the new data block. 
[0120] With this construction, the new data block Is 
written to the recording area of the old data block whk:h 
is Judged as needing to be nullified. 
[0121] In other words, recording the new data block 
has the effect of nui ifying the old data block. According- 
ly, the load on the device hardly Increases despite the 
execution of the nu'Iiflcatlon. 

[0122] Here, the recording medium may store time 
limit information showing a recording time limit of each 
data block recorded on the recording medium, the re- 
cording time limit being a time limit after which retention 
of the data block on the recording medium Is prohibited, 
wherein the Judging step judges that each data block 
whose recording time limit Is reached needs to be nulli- 
fied, based on the time limit information, and whenever 
any data block Is Judged as needing to be nullified be- 
cause a recording time limit of the data block Is reached, 
the nullifying step nullifies the data block irrespective of 
whether the predetennined number of data blocks are 
judged as needing to be nullified or whether one or mora 
data blocks whose total amount of data reaches the pre- 
determined amount are judged as needing to be nulli- 
fied. 



[0123] With this construction , each data block whose 
recording time limit is reached is judged as needing to 
be nullified. 

[0124] Since each data block Is nullified based on Its 
5 recording time (imlt, It \3 possible to make such setting 
that gives a priority to each data block. This increases 
fiexibi ity. 

[0125] Here, the data nullification method may further 
Include the step of: utilizing the target data recorded on 
10 the recording medium, In units of data blocks, wherein 
the judging step further judges that each data block 
which was utilized in the utilizing step needs to be nul- 
lified. 

[01 26] With this construction, each utilized data block 

19 is Judged as needing to be nullified. 

[0127] This Improves user-frlendllness without de- 
parting from the principle of copy prohibition. 
[0128] Here, the data nullification method may further 
include the step of: utilizing the target data recorded on 

20 the recording medium, in units of data blocks, wherein 
the judging step judges that each data block which was 
utilized In the utilizing step needs to be nullified. 

[01 29] With this construction, each utilized data block 
Is Judged as needing to be nullified. 
25 [01 30] Since each data block which was reproduced, 
copied, or moved Is nullified, user-friendliness can be 
improved without departing from the principle of copy 
prohibition. 

[0131] Here, the nullifying step may destroy all parts 
30 of a data block which Is judged as needing to be nullified. 
[0132] With this construction, all parts of the data 
block Judged as needing to be nullified are destroyed. 
[0133] This enhances security. 
[0134] Here, the nullifying step may destroy at least a 
35 part of a data block which Is Judged as needing to be 
nullified, the part of the data block being necessary to 
utilize remaining parts of the data block. 
[0135] With this construction, at least the part of the 
data block which Is needed to utilize the other parts of 
the data block Is destroyed. 

[0136] This makes the data block unusable while min- 
imizing the Increase In the load of the device. 
[0137] Here, each data block recorded on the record- 
ing medium may be encrypted using an individual en- 
cryption key, wherein a decryption key for decrypting the 
encrypted data block is stored on the recording medium , 
and the nullifying step destroys at least a decryption key 
corresponding to a data block which Is judged as need- 
ing to be nullified. 

[0138] With this construction, at least the decryption 
key correspond ng to the data block Is destroyed. As a 
result, the data block remaining on the recorcling medi- 
um becomes unusable, since the data block cannot be 
decrypted without the decryption key. 
[0139] Thus, the data block is made unusable with a 
minimum increase in the load of the device. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

[01 40] These and other objects, advantages and fea- 
tures of the Invention will become apparent from the fol- 
lowing description thereof taken In conjunction with the 
accompanying drawings which lliustrate specific em- 
bodiments of the invention. 
[0141] In the drawings: 

FIG. 1 shows an example hardware construction of 
a reception/reproduction/nulltfication system to 
which the first embodiment of the Invention relates; 
FIG. 2 is a functional block diagram of a reception/ 
reproduction/nullification device of the first emlM)d- 
Iment; 

FIG. 3 shows an example operation of the recep- 
tion/reproduction/nuiilfication device of the first em- 
bodiment; 

FIG. 4 shows another example operation of the re- 
ception/reproduction/nullification device of the first 
embodiment; 

FIG. 5 is a functional block diagram of a reception/ 
reproduction/nullification device of the second em- 
bodiment of the Invention; 

FIG. 6 shows an example operation of the recep- 
tlon/reproduction/nuiiification device of the second 
embodiment; 

FIG. 7 Is a functional block diagram of a reception/ 
reproduction/nullification device of the third embod- 
iment of the invention; and 
FIG. 8 shows an example operation of the recep- 
tlon/reproductlon/nulltfication device of the third 
embodiment. 

DESCRIPTION OF THE PREFERRED 
ElVlBODIMENTS 

First Embodiment 

(Overview) 

[01 42] The first embodiment of the present Invention 
is the following device. When digital content which is 
copy-prohibited ("Copy Never) is received, the device 
aliowsthe digital content to be recorded onto a recording 
medium, but nullifies the recorded digital content once 
the recorded olgltai content has been reproduced or a 
predetermined time period has passed from the time at 
which the digital content was recorded. This enables 
time shifting to be performed only for one reproduction 
or only wthin the predetermined time period after the 
reception. 

(Construction) 

[0143] FIG. 1 shows an example hardware construe- 
tton of a reception/reproductlon/nuliificatlor system to 
which the first embodiment of the present invention re- 



lates. 

[0144] In addition to a system LSI 800. the drawing 
shows an antenna 901 , a reception device 902, a mon- 
itor 903. a RAM 904, an HDD 905. a DVD recorder 906. 
5 and a ROM 907 for purposes of illustration. The system 
LSI 800, the RAM 904, the HDD 905, and the ROM 907 
are generally contained in the same case called an STB 
(set-top box) . 

[0145] The system LSI 800 includes a transport 
10 stream decoder 601 , an AV decoder 802, an encryption 
engine 803, and a microcomputer 804. These construc- 
tion elements are enclosed within the same semicon- 
ductor chip, to prevent unencrypted digital data which is 
obtained by decoding a transport stream from being 
*3 transf en-ed over wiring of a circuit board. This strength- 
ens security. 

[0146] The reception device 902 receives a desired 
can-ier wave from a broadcast station via the antenna 
901 and demodulates rt, to produce a transport stream 

20 (hereafter a "TS stream") made up of packets storing 
desired digital content and control data for the digital 
content. If the desired digital content requires copyright 
protection, infomnation that indicates prohibition of cop- 
ies Is attached to the digital content. As one example, 

25 copy control information "Copy Never" is attached to the 
digital content. The TS stream has a header unit and a 
payload unit The header unit Includes control Informa- 
tion and the like and is unencrypted, whereas the pay- 
load unit Includes data that need be delh/ered to its des- 

30 tination and Is encrypted using a cipher called scram- 
bling. 

[0147] The transport stream decoder 801 descram- 
bles the scrambled part of the generated TS stream us- 
ing a descramble key wh'ch has been given to author- 

35 ized users beforehand, and decodes the result. The 
transport stream decoder 801 also decodes the un- 
scrambled part of the TS stream. Hence the transport 
stream decoder 801 obtains the desired digital content. 
As one example, the digital content obtained here is an 

40 MPEG stream of audto and video. 

[0148] The AV decoder 802 generates a video output 
signal and an audio output signal from the digital content 
obtained by the transport stream decoder B01 , and has 
the monitor 903 reproduce the video and audio. 

45 [0149] The encryption engine 803 operates as fol- 
lows. If the digital content requires copyright protection 
and yet need be recorded to a recording medium such 
as the RAM 904, the HDD 905, orthe DVD recorder 906, 
the encryption engine 803 encrypts the digital content 

so obtained bythe transport stream decoder 801 . Here, the 
digital content is handled In units of data blocks which 
each correspond to a predetennined broadcast time pe- 
riod expressed, for example, in minutes. The encryption 
engine 803 encrypts each data block using a randomly- 

55 generated encryption key. The encryption engine 803 
also encrypts a decryption key corresponding to the en- 
cryption key using a device ID, and records the encrypt- 
ed data block and the encrypted decryption key as a 
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pair. To use the digital content, the encryption engine 

803 decrypts the encrypted decryption key using the de- 
vice ID, and decrypts the enciypted data block using the 
obtained decryption key. The device ID Is a value which 
Is unique to the semiconductor chip. In the present ex- 
ample, the device ID cannot be referred to from outside 
the semiconductor chip. 

[0150] The microcomputer 804 controls the overall 
operation of the STB, by reading a control program 
stored on the ROM 907 and executing it. Here, the con- 
trol program has been scrambled to prevent unauthor- 
ized users from altering It, so that the mbrocomputer 

804 descrambies the control program before executing 
It. 

[0151 1 Suppose the user who is viewing copy-prohib- 
ited digital content indicates time shifting for some rea- 
son. Then the microcomputer 804 exercises control so 
that the following three operations are simultaneously 
carried out repeatedly: (1) recording an encrypted data 
block to the HDD 905; (2) decrypting an encrypted data 
block which was recorded onto the HDD 905 a shift time 
earlier, and reproducing the decrypted data block; and 
(3) nullifying an encrypted data block on the HDD 905 
whbh has Just been reproduced so that the data block 
can no longer be reproduced. 

[0152] Here, the encrypted data block Is nuilified once 
it has been reproduced, but this condition for nullification 
may be replaced by or used in combination with the con- 
dition of whether a predetennined time period has 
passed since the time at which the data block was re- 
corded. Uost movie films run ai:)out two hours. Accord- 
ingly, if the predetermined time period is set at around 
90 minutes, it is highly possible to keep a whole movie 
film from being stored on a recording medium even in 
one second. As a result, even if the power is turned off 
halfway through the processing, the user cannot obtain 
the whole movie film in its entirety, and so cannot repro- 
duce the whole movie film later. Hence time shifting can 
be perfomned only within the predetermined time period. 
[0153] FIG. 2 is a functional block diagram of a recep- 
tion/reproductlon/nuiiiflcation device of the first emlsod- 
Iment. 

[0154] The reception/reproduction/n unification de- 
vice 1 00 shown in the drawing includes a user interface 
unit 101, a receiving unit 102, a descrambiing unit 103, 
a key generating unit 1 04, a data encrypting unit 1 05, a 
key encrypting unit 106, a recording unit 107, a key de- 
crypting unit 108, a data decrypting unit 109, a repro- 
ducing unit 110, a nuilification judging unit 111, a 
processing capacity judging unit 112, a sequential nul- 
lifying unit 113, and a total nullifying unit 114. In actuality, 
the function of the receiving unit 1 02 corresponds to the 
function of the reception device 902 shown in FIG. 1 . 
The function of the descrambiing unit 103 corresponds 
to the function of the transport stream decoder 801 in 
FIG. 1 . The functions of the key generating unit 104, da- 
ta encrypting tnit 105, key encrypting unit 106, record- 
ing unit 107, key decrypting unit 108. and data decrypt- 



ing unit 1 09 correspond to the function of the encryption 
engine 803 in FIG. 1. The function of the reproducing 
unit VO corresponds to the function of the AV decoder 
802 In FIG. 1. The functions of the nulllfteatlon judging 
5 unit 111 , processing capacity judging unit 112, sequen- 
tial nullifying unit 113, and total nullifying unit 114 corre- 
spond to the function of the mlcrocomptter 804 in FIG. 
1. 

[01 55] It should be noted he;^ that an explanation on 
10 functions which are not directly related to the present 
Invention has been omitted in this specification for sim- 
plicity's sake, so that the following description may differ 
with the actual practice to some extent. 
[0156] The user Interface unit 101 receives various in- 
*5 dicatlons from the user. The indications include a view 
indication, a pause indication, a time shift indication, a 
stop Indication, and an Indication to move digital con- 
tent. 

[0157] The receiving unit 102 receives transmission 

20 Giata broadcast from a broadcast station or the like. In 
the present example, the receiving unit 102 receives 
digital content which has been scrambled and is accom- 
panied with copy control Infomriation. 
[0158] The descrambiing unit 103 descrambles the 

2S scrambled digital content received by the receiving unit 
102. using a descramble key which has been given to 
authorized users beforehand. 
[0159] The key generating unit 104 operates as fol- 
lows. While the user is indicating a pause, the key gen- 

30 erating unit 104 arbitrarily generates a unique encryp- 
tion key and a decryption key corresponding to the en- 
cryption key using a random number or the like, for each 
data block corresponding to the predetermined broad- 
cast time period which Is descrambled by the descram- 

55 bling unit 103. Here, an algorithm that uses the same 
key for encryption and decryption is employed, so that 
an encryption key and a decryption key corresponding 
to the encryption key can be collectively referred to as 
a "unique key". For example, a unique key Is randomly 

40 generated for each data block that corresponds to the 
broadcast time period of 10 minutes. 
[0180] The data encrypting unit 105 operates as fol- 
lows. While the user is indicating a pause, the data en- 
crypting unit 1 05 encrypts each data block descrambled 

49 the descrambiing unit 103 using an encryption key 
generated by the key generating unit 104 for the data 
block, so that the encrypted data block can be decrypted 
using a decryption key corresponding to the encryption 
key. In the present example, each data block corre- 

so spending to the broadcast time period of 10 minutes is 
encrypted using a corresponding unique key. 
[0161] The key encrypting unit 106 encrypts the de- 
cryption key corresponding to the encryption key used 
by the data encrypting unit 1 05, using the device ID. in 

ss the present example, the unique key is encrypted using 
the device ID. 

[0162] The recording unit 107 records the data block 
encrypted by the data encrypting unit 105 and the de- 
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cryption key encrypted by the key encrypting unit 106, 
to a predetermined recording medium as a pair. In the 
present example, the pair of encrypted data block cor- 
responding to the broadcast time period of 10 minutes 
and encrypted unique key Is recorded to the HDD 905. 
Here, if the digital content does not require copyright 
protection, the data biock may be recorded in an unen- 
crypted form. 

[0163] The key decrypting unit 108 operates as fol- 
lows. While the user is Indicating time shifting, the key 
decrypting unit 108 reads an encrypted decryption key 
corresponding to each encrypted data block which is to 
be reproduced, from the recording medium. The key de- 
crypting unit 1 08 then decrypts the encrypted decryption 
key using the devbe ID. In the present example, an en- 
ciypted unique key that la paired with each encrypted 
data biock which was recorded a shift time earlier (here- 
after a "shift-tlme-old data biock") Is decrypted using the 
device ID 

[0164] The data decrypting unit 109 operates as fol- 
lows. While the user is Indicating time shifting, the data 
decrypting unit 1 09 decrypts each encrypted data block 
to be reproduced, using a corresponding decryption key 
decrypted by the key decrypting unit 1 08. In the present 
example, each shift-time-old data block is decrypted us- 
ing a corresponding unique key. 
[0165] The reproducing unit 1 1 0 operates as follows. 
While the user is indicating viewing, the reproducing unit 

1 1 0 reproduces each data block descrambied by the de- 
scrambling unit 103. While the user is indicating time 
shifting, the reproducing unit 1 1 0 reproduces each data 
block decrypted by the data decrypting unit 109. 
[0166] The nullification Judging unit 111 operates as 
follows. When digital content Is received and recorded 
despite its copy prohibition status, the nuilificatlon judg- 
ing unit 1 1 2 judges, for each pair of encrypted data block 
and encrypted decryption key recorded on the recording 
medium, whether the pair should be nuillfied. based on 
a specific condition. In the present example, the nulilfl- 
cation judging unit 1 1 1 judges, for each pair of encrypted 
data block corresponding to the broadcast time period 
of 10 minutes and encrypted unique key which are re- 
corded on the HDD 905, whether the pair should be nul- 
lified. 

[0167] The specific condition here is whether the data 
biock has been reproduced by the reproducing unit 11 0, 
or whether a predetermined time period has passed 
from the time at which the data biock was received by 
the receiving unit 102 or recorded by the recording unit 
1 07. In the case where the lapse of the predetermined 
time period is used as the condition for nullification, the 
recording unit 107 records time limit information to the 
recording medium together with each pair of encrypted 
data block and encrypted decryption key. The time limit 
infomriation shows the reception time or recording time 
of the data block, and Is used to manage the recording 
time limit of the data block. The nullification Judging unit 

111 Judges whether the recording time limit Is reached, 



according to this time limit Information. 
[0168] The processing capacity Judging unit 112 Judg- 
es whether the device 1 00 has an enough processing 
capacity to destroy ail parts of the pair of encrypted data 
s block and encrypted decryption key which is Judged as 
needing to be nuillfied. 

[0169] The sequential nullifying unit 1 1 3 operates as 
follows. When the nullification judging unit 111 Judges 
that a predetermined number of encrypted data blocks 

10 and their corresponding encrypted decryption keys 
should be nuillfied or that one or more encrypted data 
blocks whose total annount of data reaches a predeter- 
mined amount and their corresponding encrypted de- 
cryption keys should be nullified, the sequential nulilfy- 

f5 ing unit 113 nullifies the Judged pairs of encrypted data 
blocks and encrypted decryption keys. Here, the prede- 
termined number Is an Integer no less than 1 . 
[0170] To nullify a pair of encrypted data block and 
encrypted decryption key by the sequential nullifying 

20 unit 1 1 3 means to make the pair on the recording medi- 
um unusable. Ordinary data deletion merely deletes link 
Infomnatlon of a data file or rewrites several bits of the 
header unit of the data file, so that the data unit of the 
data file remains as it Is. This being so, the data can be 

25 recovered in some cases even after it Is supposed to be 
deleted. Such data deletion cannot be regarded as mak- 
ing the data unusable. On the other hand, the nullifica- 
tion performed by the sequential nullifying unit 113 de- 
stroys the pair of encrypted data block and encrypted 

30 decryption key Itself, by writing arbitrary data to a re- 
cording area of the pair or by initializing the recording 
area. 

[0171] Here, the sequential nullifying unit 113 may de- 
stroy both the encrypted data block and the encrypted 
3s decryption key. In reality, however, writing arbitrary data 
of the same size over each pair which is judged as need- 
ing to be nu llrf ied may cause a problem to the processing 
capacity of the device 1 00. 

[0172] For instance, in time shifting It is necessary to 

"fo simultaneously perfomn the following two sequence of 
operations. The first sequence of operations Is receiv- 
ing, descrambling, encrypting, and recording broadcast 
digital content. The second sequence of operations is 
reading, decrypting, and reproducing recorded digital 

^5 content. This puts a heavy load on the control system, 
the recording medium, and the like. This being so, to 
further execute an operation of writing arbitrary data of 
the same size over each pair which needs to be nullified, 
it is necessary to Increase the processing capacity of 

50 the device 1 00 or to restrict other functions. 

[0173] However, the act of nullifying data itself does 
not contribute user convenience at aii. For this reason, 
it Is undesirable to Increase the processing capacity 
which would cause an increase in cost, or to limit other 

55 functions. 

[0174] Accordingly, the sequential nullifying unit 113 
may destroy at least an Important part of the pair of en- 
crypted data biock and encrypted decryption key. The 
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important part referred to here is data that is necessary 
to reproduce the other parts of the pair, in more detaii. 
the Innportant part Is the decryption key. in the case of 
ly/) PEG data, the important part is an I picture or the first 
sector of such an i pictu*^. 5 
[0175] As an attemative, the sequentlai nullifying unit 
113 may destroy all parts of the pair when the process- 
ing capacity Judging unit 112 judges that there is an 
enough processing capacity, and destroy only the im- 
portant part of the pair when the processing capacity io 
judging unit 112 Judges that there is not an enough 
processing capacity. 

[0176] Thetotalnullifyingunit 114destroysallr6main- 
ing parts of the pairs of encrypted data blocics and en- 
crypted decryption keys which have not been destroyed is 
by the sequential nullifying unit 113, when there is an 
enough processing capacity. Also, when the user indi- 
cates to stop time shifting, the total nullifying unit 114 
destroys ali remaining parts which have not been de- 
stroyed. 20 

(First Operation Example) 

[0177] FIG. 3 shows an example operation of the re- 
ceptlon/reproduction/nuiiiflcation device 1 00 of the first 25 
embodiment. 

[0178] Sequential reproduction, recording, time shift- 
ing, and nullifying of the present invention are explained 
with reference to FIG. 3. 

30 

(1 ) in the stopped state, the user Interface unit 1 01 
waits for receiving the user's Indication to view 
some program (SI). 

(2) Upon receh/Ing the view indication (SI :Yes). the 
sequential reproduction starts (82). ss 

The receiving unit 102 starts receiving trans- 
mission data of the program which the user wants 
to view, in the present example, scrambled digital 
content with copy control Infonnation "Copy Never 
is received. 40 

The descrambiing unit 1 03 starts descrambling 
the scrambled digital content received by the re- 
ceiving unit 102. 

The reproducing unit 1 1 0 starts reproducing the 
digital content descrambied by the descrambiing <s 
unities. 

(3) During the sequentlai reproduction, the user in- 
terface unltlOl waits for the user's indication to stop 
(S3). 

(4) Upon receiving the stop indication (S3:Yes), the so 
operations of the receiving unit 102, descrambiing 
unit 103, and reproducing unit 110 are stopped to 
end the sequential reproduction and return to the 
stopped state (S4). 

(5) During the sequential reproduction, the user in- 55 
terface unit 101 waits for the user's indication to 
pause (S5). 

(6) Upon receiving the pause Indication (S5:Yes). 



the recording starts (S6). 

The key generating unit 104 randomly gener- 
ates an encryption key and a decryption key corre- 
sponding to the encryption key using a random 
number or the like, for each data block correspond- 
ing to the predetermined broadcast time period 
which is descrambied by the descrambiing unit 103. 
In the present example, a uniaus key is randomly 
generated for each data block corresponding to the 
broadcast time period of 1 0 minutes . 

The data encrypting unit 1 05 encrypts the data 
block descrambied by the descrambiing unit 103 
using the encryption key generated by the key gen- 
erating unit 104, so that the encrypted data block 
can be decrypted using the corresponding decryp- 
tion key. in the present example, the data block cor- 
responding to the broadcast time period of 1 0 min- 
utes Is encrypted using the unique key. 

The key encrypting unit 1 06 encrypts the de- 
cryption key corresponding to the encryption key 
used by the data encrypting unit 1 05. using the de- 
vice ID. In the present example, the unique key is 
encrypted using the device ID. 

The recording unit 107 records the data block 
encrypted by the data encrypting unit 105 and the 
decryption key encrypted by the key encrypting unit 
1 06, to the recording medium, in the present exam- 
ple, the pair of encrypted data block corresponding 
to the broadcast time period of 1 0 minutes and en- 
crypted unique key is recorded to the HDD 905. 

The reproducing unit 110 stops the sequential 
reproduction of the digital content. 

(7) During the recording, the nullification judging 
unit 111 judges, for each pair of encrypted data 
block and encrypted decryption key recorded on the 
recording medium, whether the recording time limit 
of the pair is reached. In the present example, the 
recording time limit Is set at 90 minutes, so that once 
90 minutes have passed since a pair of encrypted 
data block corresponding to the broadcast time pe- 
riod of 10 minutes and encrypted unique key was 
recorded onto the HDD 905, the nullification judging 
unit 111 judges that the recording time limit of the 
pair is reached (S7). 

(8) When the recording time limit of the pair is 
reached, the sequential nullifying unit 113 v/rites ar- 
bitrary data to a recording area of the encrypted de- 
cryption key to nullify the pair. Here, if the process- 
ing capacity judging unit 1 1 2 judges that there is an 
enough processing capacity, the sequential nullify- 
ing unit 113 further writes arbitrary data to a record- 
ing area of the encrypted data block (S8). 

(9) During the recording, the user interface unit 1 01 
waits for the user's indication to stop (89). 

(10) Upon receiving the stop indication (S9:Yes), 
the operations of the receiving unit 102. descram- 
biing unit 103, key generating unit 104, data en- 
crypting unit 105, key encrypting unit 106, and re- 
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cording unit 107 are stopped to end the recording. 
Also, the total nullifying unit 1 1 4 destroys all remain- 
ing data which has not been destroyed by the se- 
quential nullifying unit 113, before returning to the 
stopped state (SIC). 5 

(11) During the recording, the user Interface unit 
101 v/aits for the user's indication to perform time 
shifting (Sll). 

(12) Upon receiving the time shift indication (S11 : 
Yes), the time shifting starts (S1 2). io 

The key decrypting unit 1 08 reads an encrypted 
decryption key paired with each shift-time-old data 
block from the recording medium, and decrypts the 
encrypted decryption key using the device ID. In the 
present example, the shift time is 30 minutes, so f5 
that an encrypted unique key which is paired with 
each encrypted data block that was recorded 30 to 
20 minutes earlier is decrypted. If the shift time is 
longer than the recording time limit, time shifting 
cannot be perfomned, as the shift-time-old data 20 
block has aiready been nullified by the time the time 
shifting starts. In such a case, the shift time Is set 
as the recording time limit to continue the operation. 

The data decrypting unit 1 09 decrypts the en- 
crypted data block using the decryption key de- 
crypted by the key decrypting unit 108. In the 
present example, the encrypted data block that was 
recorded 30 to 20 minutes earlier is decrypted using 
the decrypted unique key 

The reproducing unit 110 reproduces the data so 
block decrypted by the data decrypting unit 1 09. 

(13) During the timeshlfting. the nullification Judging 
unit 111 Judges, for each pair of encrypted data 
block and encrypted decryption key recorded on the 
recording medium, whether the recording time limit ss 
of the pair is reached or whether the data block has 
been reproduced by the reproducing unit 1 1 0. In the 
present example, the recording time limit is 90 min- 
utes, so that the nullification Judging unit 1 1 1 judges, 

for each pair of encrypted data block corresponding 
to the broadcast time period of 1 0 minutes and en- 
crypted unique key which are recorded on the HDD 
905, whether 90 minutes have passed since the re- 
cording or whether the data block has been repro- 
duced (SIS). 45 

(14) When the pair is judged as needing to be nul- 
lified, the sequential nullifying unit 113 writes arbi- 
trary data to a recording area of the encrypted de- 
cryption key to nullify the pair. Here, if the process- 
ing capacity Judging unit 112Judges that there is an so 
enough processing capacity, the sequential nullify- 
ing unit 113 further writes arbitrary data to a record- 
ing area of the encrypted data block (SI 4). 

(15) During the time shifting, the user interface unit 

1 01 waits for the user's indication to stop (S1 5). 55 

(16) Upon receiving the stop indication (S15:Yes). 
the operations of the receiving unit 102, descram- 
bllng unit 103, key generating unit 104, data en- 



crypting unit 105. key encrypting unit 106, recording 
unit 107, key decrypting unit 108, data decrypting 
unit 109, and reproducing unit 110 are stopped to 
end the time shifting. Also, the total nullifying unit 
114 destroys all remaining data which has not been 
destroyed by the sequential nullifying unit 113, be- 
fore returning to the stopped state (SI 6). 

(1 7) During the time shifting, the user interface unit 
1 01 waits for the user's indication to pause (SI 7). 

(1 8) Upon receiving the pause indication (81 7:Yes), 
the operations of the key decrypting unit 108, data 
decrypting unit 109. and reproducing unit 110 are 
stopped, while the recording continues (816). 

(Second Operation Example) 

[0179] In the first operation example, the recording is 
not performed during the sequential reproduction. In- 
stead, upon receiving the user's indication to pause, the 
sequential reproduction Is stopped and the recording is 
commenced. In the second operation example, on the 
other hand, the recording Is performed during the se- 
quential reproduction, so as to make it possible to per- 
form time shifting even if the user does not Indicate to 
pause. Moreover, an automatic pause clear function is 
added in the second operation example. This function 
automatically clears the pause when the pause time 
reaches an upper limit, and proceeds tothetimeshifting. 
[0180] FIG. 4 shows another example operation of the 
receptlon/reproductlon/nulllfication device 100 of the 
first embodiment. 

[0181] Here, it Is assumed that digital content re- 
ceived by the receiving unit 102 Is accompanied with 
Infonnatlon showing a recording time limit and a repro- 
duction time limit. 

[0182] The recording time limit is a time period which 
begins when a pair is recorded and after which the re- 
tention of the pair on the recording medium Is prohibited. 
The reproduction time limit is a time period which begins 
when a pair is first reproduced and after which the re- 
tention of the pair on the recording medium is prohibited. 
A pair whose recording time limit or reproduction time 
limit Is reached is judged as needing to be nullified. 
[0183] Sequential reproduction/recording, recording, 
time shifting, nullification, and automatic pauseciearing 
of the present invention are explained by referring to 
FIG. 4. Note here that steps wh!ch arethe same as those 
in the first operation example are given the same step 
numbers. 

(1) In the stopped state, the user Interface unit 1 01 
waits forthe user's indication to view some program 
(SI). 

(2) Upon receiving the view indication (SI :Yes), the 
sequential reproduction/recording starts (SI 02). 

The receiving unit 102 starts receiving trans- 
mission data of the program which the user wants 
to view, in the present example, scrambled digital 
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content with copy control Information "Copy Never** 
is received. 

The descrambllng unit 1 03 starts descrambling 
the scrambled digital content received by the re- 
ceivirg unit 102. 5 

The reproducing unit 110 starts reproducing the 
digital content descrambled by the descrambling 
unit 103. 

The key generating unit 104 randomly gener- 
ates an encryption key and a decryption key con-e- to 
spending to the encryption key using a random 
number or the i:ke» for each data block correspond- 
ing to the predetermined broadcast time period 
which Is descrambled by the descrambling unit 1 03. 
In the present example, a unique key is random y f9 
generated for each data block corresponding to the 
broadcast time period of 10 minutes . 

The data encrypting unit 105 encrypts the de- 
scrambled data block using the encryption key gen- 
erated by the key generating unit 104, so that the 20 
encrypted data block can be decrypted using the 
corresponding decryption key. In the present exam- 
pie, the data block corresponding to the broadcast 
time period of 10 minutes is encrypted using the cor- 
responding unique key. 25 

The key encrypting unit 106 encrypts the de- 
cryption key corresponding to the encryption key 
used by the data encrypting unit 1 05, using the de- 
vice ID. In the present example, the unique key is 
encrypted using the device ID. so 

The recording unit 107 records the data block 
encrypted by the data encrypting unit 105 and the 
decryption key encrypted by the key encrypting unit 
1 06, to the recording medium, in the present exam- 
ple, tlie pair of encrypted data block con-esponding ss 
to the broadcast time period of 1 0 minutes and en- 
crypted unique key is recorded to the HDD 905. 

i-iere, the pair Is accompanied with the record- 
ing time limit and the reproduction time limit togeth- 
er with time limit information. When the data block 40 
Is first reproduced, the time at which the data block 
Is first reproduced is added to the time limit infor- 
mation. 

(3) During the sequential reproduction/recording, 
the nullification judging unit 111 refers to time limit 
Information to Judge, tor each pair of encrypted data 
block and encrypted decryption key recorded on the 
recording medium, whether the recording time limit 
of the pair is reached. Also, the nullification judging 
unit 111 judges, for each pair of encrypted data so 
block and encrypted decryption key which has been 
reproduced, whether the reproduction time limit of 
the pair is reached, in the present example, the re- 
cording time limit is set at 90 minbtes after the re- 
cording, and the reproduction time limit is set at 60 55 
minutes after the first reproduction. This being so, 
when 90 minutes have passed since a pair of en- 
crypted data block corresponding to the broadcast 



time period of 1 0 minutes and encrypted unique key 
was recorded, the recording time limit of the pair is 
Judged as being reached. Also, when 60 minutes 
have passed since the pair was first reproduced, the 
reproduction time limit of the pair is judged as being 
reached (SI 03). 

(4) When there is any pair of encrypted data block 
and encrypted decryption key whose recording time 
limit or reproduction time limit is reached, the se- 
quential nullifying unit 1 13 writes arbitrary data to a 
recording area of the encrypted deciyptlon key to 
nullify the pair. Here, If the processing capacity Judg- 
ing unit 112 judges that there is an enough process- 
ing capacity, the sequential nullifying unit 113 fur- 
ther writes arbitrary data to a recording area of the 
encrypted data block (SI 04). 

(5) During the sequential reproduction/recording, 
the user interface unit 101 waits for the user's indi- 
cation to stop (SI 05). 

(6) Upon receiving the stop indication (S105:Yes), 
the operations of the receiving unit 102, descram- 
bling unit 103, reproducing unit 110, key generating 
unit 104, data encrypting unit 105, key encrypting 
unit 1 06. and recording unit 1 07 are stopped to end 
the sequential reproduction/recording. Also, the to- 
tal nul ifying unit 114 destroys all rema ning data 
which has not been destroyed by the sequential nul- 
lifying unit 11 3, before returning to the stopped state 
(SI 06). 

(7) During the sequential reproduction/recording, 
the user interface unit 101 waits for the user's indi- 
cation to perfomn time shifting (SI 07). 

(8) During the sequential reproduction/recording, 
the user interface unit 101 Vi/aitsforthe user's indi- 
cation to pause (SI 08). 

(9) Upon receiving the pause indication (SI 08:Yes), 
the reproduction is stopped while the recording con- 
tinues (SI 09). 

The reproducing unit 110 stops the sequential 
reproduction of the digital content. 

(10) During the recording, the nullification judging 
unit 111 refers to time limit information to judge, for 
each pair of encrypted data block and encrypted de- 
cryption key recorded on the recording medium, 
whether the recording time limit of the pair is 
reached. Also, the nullification Judging unit 111 Judg- 
es, for each pair of encrypted data block and en- 
crypted decryption key whk:h has bQQW reproduced, 
whether the reproduction time limit of the pair is 
reached (S1 10). 

(11 ) When there Is any pair of encrypted data block 
and encrypted decryption key whose recording time 
limit or reproduction time limit is reached, the se- 
quential nullifying unit 1 13 writes arbitrary data to a 
recording area of the encrypted decryption key to 
nuliifythepairiHere, if the processing capacity Judg- 
ing unit 112 Judges that there Is an enough process- 
ing capacity, the sequential nullifying unit 113 fur- 
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ther writes arbitrary data to a recording area of the 
encrypted data block (S111). 

(12) During the recording, the user Interface unit 
1 01 waits for the user's Indication to stop (89). 

(13) Upon receiving the stop Indication (S9:Yes). s 
the operations of the receiving unit 102, descram- 
bling unit 103, key generating unit 104, data en- 
crypting unit 105, key encrypting unit 106, and re- 
cording unit 107 are stopped to end tiie recording. 
Also, the total nullifying unit 11 4 destroys all remain- to 
Ing data which has not been destroyed by the se- 
quential nullifying unit 113, before returning to the 
stopped state (510). 

(14) During the recording, the user interface unit 

101 watts fertile user's indication to perform time t3 
shifting (S11) . 

(15) During the recording, tiie sequential nullifying 
unit 113 Judges whether the shift time reaches an 
upper limit, if th*e shift tirre reaches the upper limit, 

the sequential nullifying unit 113 sets the shift time 20 
as the upper limit and automatically clears the 
pause, so that the time shifting is commenced 

(51 15) . In tiie present example, tiie upper limit Is 
set at 90 minutes which are the same as the record- 
ing time limit, in this way, even if the recording time 25 
limit of data which has never been reproduced s 
reached, that data will not be nullified. 

(16) When the automatic pause clearing occurs 
(S1 15: Yes) or when the time shift Indication Is re- 
ceived (S107:Yes, S11 :Yes), the time shifting starts so 

(51 16) . 

The key decrypting unit 1 08 reads an encrypted 
decryption key paired with each shift-time-old data 
block from the recording medium, and decrypts the 
encrypted decryption key using the device ID I n the ss 
present example, the shift time is 30 minutes, so 
that an encrypted unique key paired with each data 
block whteh was recorded 30 to 20 minutes earlier 
is decrypted. Here, If the shift time exceeds the re- 
cording time limit, time shifting cannot be per- 40 
formed, as the shift-time- old data block has already 
been nullified by the time the time shifting starts, in 
this case, the shift time Is set as the recording time 
limit to continue the operation. 

The data decrypting unit 109 decrypts the en- 45 
crypted data block using the decryption key de- 
crypted by the key decrypting unit 108. In the 
present example, the encrypted data block of 30 to 
20 minutes earlier is decrypted using the decrypted 
unique key. so 

The reproducing unit 110 reproduces the data 
block decrypted by the data decrypting unit 109. 

(1 7) During the time shifting, the nullification judging 
unit 1 1 1 refers to time limit inf omnation to Judge, for 
each pair of encrypted data block and encrypted de- 55 
cryptlon key recorded on the recording medium, 
whether tie recording time limit of the pair s 
reached. Also, the nuiliflcationjudging unit 111 Judg- 



es, for each pal:' of encrypted data block and en- 
crypted decryption key which has been reproduced, 
whether the reproduction time limit of the pair Is 
reached (S1 17). 

(1 8) When there Is any pair of encrypted data block 
and encrypted decryption key whose recording time 
limit or reproduction time limit is reached, the se- 
quential nullifying unit 113 writes arbitrary data to a 
record ng area of the encrypted decryption key to 
nullify the pair. IHere, if the processing capacity Judg- 
ing unit 1 12 judges that there Is an enough process- 
ing capacity, the sequential nullifying unit 113 fur- 
ther writes arbitrary data to a recording area of the 
encrypted data block (S118). 

(19) During the time shifting, the user interface unit 
1 01 waits for the user's indication to stop (815) . 

(20) Upon receiving the stop Indication (81 5: Yes), 
the opefBtions of the receiving unit 102, descram- 
biing unit 103, key generating unit 104. data en- 
crypting unit 1 05. key encrypting unit 1 06. recording 
unit 107, key decrypting unit 106, data decrypting 
unit 109, and reproducing unit 110 are stopped to 
end the time shifting. Also, the total nullifying unit 
1 1 4 destroys all remaining data which has not been 
destroyed by the sequential nullifying unit 113, be- 
fore returning to the stopped state (816). 

(21) During the time shifting, the user interface unit 
101 waits for the user's Indication to pause (817). 

(22) Upon receiving the pause Induration (81 7:Yes), 
the operations of the key decrypting unit 108, data 
decrypting unit 109, and reproducing unit 110 are 
stopped, while the recording continues (816). 

[0184] According to the first embodiment of the 
present invention, copy-prohibited digital content can be 
recorded to enable time shifting, but the recorded digital 
content is promptly nullified to protect its copyright. This 
allows user-friendliness to be improved without depart- 
ing from the principle of copy prohibition. 

Second Embodiment 

(Overview) 

[0185] The second embodiment of the present Inven- 
tion Is the following device. When digital content which 
Is copy-prohibited ("Copy Never") Is received, the de- 
vice allows the digital content to be recorded, but nulli- 
fies the recorded digital content once a predetermined 
time period has passed Here, by writing new data 
blocks over old data blocks which need be nullified, the 
old data blocks which have been stored for more than 
the predetermined time period can be nullified without 
affecting the processing capacity of the device. As a re- 
sult, time shifting can be performed only within the pre- 
detenmined time period from the reception. 
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(Construction) 

[0186] A receptlon/reproduction/nulliflcatlon devlc© of 
the secord embodiment has the same hardware con- 
struction as that of the first embodiment. 5 
[0167] FIG. 5 fs a functlonai blocic diagram of the re- 
ception/reproduction/nuilifloation device of the second 
embodiment. 

[0188] The reception/reproduction/nulllflcatlon de- 
vice 200 shown In the drawing Includes the user inter- io 
face unit 101, the receiving unit 102, the descrambling 
unit 103, the l<ey generating unit 104, the data encrypt- 
ing unit 105, the Key encrypting unit 106, a recording 
unit 201 , the key decrypting unit 1 08, the data decrypting 
unit 109, the reproducing unit 110, a nullification judging is 
unit 202, the processing capacity Judging unit 112, a se- 
quential nulliiying unit 203, and a total nullifying urit 204. 
In actuality, the function of the receiving unit 102 corre- 
sponds to the function of the reception device 902 
shown In FIG. 1 . The function of the descrambling unit 20 
103 corresponds to the function of the transport stream 
decoder 801 in FIG. 1 . The functions of the key gener- 
ating unit 104, data encrypting unit 105, key encrypting 
unit 106, recording unit 201, key decrypting unit 108, 
and data decrypting unit 1 09 correspond to the function 25 
of the encryption engine 803 in FIG. 1 . The function of 
the reproducing unit 110 corresponds to the function of 
the AV decoder 802 In FIG. 1. The functions of the nul- 
lification judging unit 202, processing capacity Judging 
unit 1 1 2, sequential nullifying unit 203, and total nullify- 30 
ing un It 204 correspond to the function of the microcom- 
puter 804 in FIG. 1. 

[0189] Construction elements which are the same as 
those In the first embodiment are given the same refer- 
ence numerals and their explanation has been omitted. 35 
[0190] The recording unit 201 sequentially records 
pairs of encrypted data blocks and encrypted decryption 
keys of digital content, onto the predetemnined record- 
ing medium. IHere, if the digital content is copy-prohib- 
ited, the recording unlt201 reserves a plurality of record- 
ing areas that are each capable of storing data of the 
predetermined broadcast time period, on the recording 
medium. The recording unit 201 then sequentially 
records the pairs to the reserved recording areas. In the 
present example, the recording unit 201 reserves nine 
recording areas that can each store data corresponding 
to the broadcast tinne period of 10 minutes, on the HDD 
905. The recording unit 201 then records pairs of en- 
crypted data blocks and encrypted unique keys, se- 
quentially to the reserved recording areas. Here, If the so 
recording areas already store pairs of encrypted data 
blocks and encrypted unique keys, the recording unit 
201 writes the new pairs over the old pairs. If the digital 
content does not require copyright protection, on the 
other hand, the recording unit 201 can record the digital 55 
content in an unencrypted form. 
[0191] I'he nullification judging unit 202 operates as 
follows. When digital content is received and recorded 



despite Its copy-prohlbltlon status, the nullification Judg- 
ing unit 202 Judges, for each pair of encrypted data block 
and encrypted decryption key recorded on the recording 
medium, whether the pair should be nullified, based on 
a specific condition. In the present example, the nullifi- 
cation Judging unit 202 Judges, ^or each pair of encrypted 
data block corresponding to the broadcast time period 
of 10 minutes and encrypted unique key which are re- 
corded on the HDD 905, whetherthe pair should be nul- 
lified. 

[01 92] The specific condition used here is whetherthe 
data block has been reproduced by the reproducing unit 
110 or whether a predetermined time period has passed 
since the data block was received by the receiving unit 
102 or recorded by the recoroing unit 201 . In this em- 
bodiment, sequence information showing a sequence In 
which pairs of encrypted data blocks and encrypted de- 
cryption keys were recorded Is stored on the recording 
medium. This being so, the nullification Judging unit 202 
makes the judgement such that the pairs are nullified In 
the recording sequence, and the recording unit 201 
writes the new pairs to the recording areas storing the 
old pairs which are judged as needing to be nullified. In 
the present example, nine pairs of encrypted data 
blocks corresponding to the broadcast time period of 1 0 
minutes and encrypted unique keys which are recorded 
In the nine recording areas on the HDD 905 are each 
nullified 90 minutes after It was written, as a result of 
overwriting with a new pair. 

[0193] The sequential nullifying unit 203 operates as 
follows. Wheneverthe nullftoation Judging unit 202 Judg- 
es that a predetemnined number of encrypted data 
blocks and thefr corresponding encrypted decryption 
keys should be nullified or that one or more encrypted 
data blocks whose total amount of data reaches a pre- 
determined amount and their corresponding encrypted 
decryption keys should be nullified, the sequential nul- 
lifying unit 203 nullifies the judged pairs of encrypted da- 
ta blocks and encrypted decryption keys. Here, if there 
are new pairs of encrypted data blocks and encrypted 
decryption keys which need to be recorded, the old pairs 
can be nullified by overwriting with the new pairs. If there 
is no new pair, the sequential nullifying unit 203 destroys 
each old pair by, for example, overwriting with arbitrary 
data. 

[0194] Here, if the digital content has a fixed bit rate, 
I.e., the anrount of data per unit time Is constant, an oio 
pair can completely be nullified by the overwriting with 
a new pair However, rf the digital content has a variable 
bit rate as in MPEG, the old pair may not be able to be 
completely nullified by the overwriting with the new pair. 
[0195] In such a case, the sequential nullifying unit 
203 may destroy the old pair by writing meaningless da- 
ta over the remaining parts of the old pair which have 
not been overwritten with the new pair. As an altematlve, 
the sequential nullifying unit 203 may destroy the re- 
maining parts of the old pair when the processing ca- 
pacity Judging unit 112 Judges that there Is an enough 
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processing capacity, and leave the remaining parts as 
they are v/hen the processing capacity Judging unit 1 1 2 
judges that there Is not an enough processing capacity. 
[0196] lie total nullifying unit 204 destroys ail remain- 
ing parts of the pairs of encrypted data blocks and en- 5 
crypted decryption keys which have not been destroyed 
by the sequential nullifying unit 203. when there is an 
enough processing capacity. Also, the total nullifying 
unit 204 destroys all remaining parts when the user in- 
dicates to stop time shitting. to 

(Operation) 

[0197] FiG. 6 shows an example operation of the re- 
ception/reproduction/nullification device 200 of the sec- f 5 
ond embodiment. 

[0198] Sequential reproduction, recording, time shift- 
ing, and nullification of the present Invention are ex- 
plained by referring to FIG. 6. Note here that steps which 
are the same as those In the first embodiment are given 20 
the same step numbers and their explanation has been 
omitted. 

[0199] (1 )-(5) Same as (1 )>(5) of the first operation ex- 
ample in the first embodiment (S1-S5). 
[0200] (6) Upon receiving the pause indication (S5: 25 
Yes), the '-ecording starts (321). 
[0201] The key generating unit 104 randomly gener- 
ates an encryption key and a decryption key corre- 
sponding to the encryption key using a random number 
of the like, for each data block corresponding to the pre- so 
determined broadcast time period which is descrambled 
by the descrambiing unit 103. in the present example, 
a unique key Is randomly generated for each data block 
corresponding to the broadcast time period of 10 min- 
utes. 35 
[0202] The data encrypting unit 1 05 encrypts the de- 
scrambled data block using the encryption key generat- 
ed by the key generating unit 1 04. so that the encrypted 
data block can be decrypted by the corresponding de- 
cryption key. In the present example, the data block cor- 40 
responding to the broadcast time period of 10 minutes 
Is encrypted using the corresponding unique key. 
[0203] The key encrypting unit 1 06 encrypts the de- 
cryption key corresponding to the encryption key used 
by the data encrypting unit 1 05, using the device ID. in 45 
the present example, the unique key is encrypted using 
the device ID. 

[0204] ~^he recording unit 201 reserves a plurality of 
recording areas which can each store data of the pre- 
determined broadcast time period, on the recording me- so 
dium. The recording unit 201 then sequentially records 
pairs of encrypted data blocks and encrypted decryption 
keys to the recording areas. In the present example, 
nine recording areas each capable of storing data cor- 
responding to the broadcast time period of 1 0 minutes ss 
are reserved on the HDD 905, and pairs of encrypted 
data blocks coTespondlng to the broacfeast time period 
of 10 minutes and encrypted unique keys are sequen- 



tially recorded to the nine recording areas. Here, If the 
recording areas already store pairs of encrypted data 
blocks and encrypted unique keys, the new pairs are 
written over the old pairs. 

[0205] If any old pair was not completely destroyed by 
overwriting with a new pair, the sequential nullifying unit 
203 destroys the remaining parts of the old pair by, for 
example, overwriting with meaningless data. 
[0206] The reproducing unit 1 1 0 stops the sequentia: 
reproduction of the digital content. 
[0207] (7) Same as (9) of the first operation example 
in the first embodiment (S9). 

[0208] (8) Upon receiving the stop lndk»tion (S9: 
Yes), the operations of the receiving unit 1 02, descram- 
biing unit 103, key generating unit 104, data encrypting 
unit 1 05, key encrypting unit 1 06, and recording unit 201 
are stopped to end the recording. Also, the total nullify- 
ing unit 204 destroys ail remaining data which has not 
been destroyed by the sequential nullifying unit 203, be- 
fore returning to the stopped state (S22). 
[0209] (9)-(1 0) Same as (11)-(12) of the first operation 
example in the first embodiment (S11-S12). 
[0210] (11) Same as (15) of the first operation exam- 
ple in the first embodiment (S15). 
[0211] (12) Upon receiving the stop indication (SI 5: 
Yes), the operations of the receiving unit 1 02, descram- 
biing unit 103» key generating unit 104, data encrypting 
unit 105, key encrypting unit 106, recording unit 201, 
key decrypting unit 108, data decrypting unit 109, and 
reproducing unit 110 are stopped to end the time shift- 
ing. Also, the total nuiiitying unit 204 destroys all remain- 
ing data which has not been destroyed by the sequential 
nullifying unit 203, before returning to the stopped state 
(S23). 

[0212] (13)-(14) Same as (17)-(18) of the first opera- 
tion example in the first embodiment (S17-Sie). 
[0213] According to the second embodiment of the in- 
vention, copy-prohibited digital content can be recorded 
to enable time shifting, but the recorded digital content 
is nullified by overwriting with new data once a prede- 
termined time period has passed. This enables user- 
friendliness to be Improved without departing from the 
principle of copy prohibition. Furthermore, the sequen- 
tial nullification .s executed without increasing the load 
on the device. 

Third Embodiment 

(Overview) 

[0214] The third embodiment of the present invention 
Is the following device. When digital content whose cop- 
ying Is pemnitted only once ("Copy one Generation') is 
received and recorded on a recording medium, the dig- 
ital content can be moved to another recording medium, 
but the digital content on the original recording medium 
is nullified little by little upon being copied, so that the 
digital content v/ill not remain on the original recording 
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medium. 
(Construction) 

[0215] A reception/reproductlon/n unification device of s 
the third embodiment has the same hardware construc- 
tion as that of the first embodiment, except for the fol- 
iowlpg new functions of the microcomputer 804. 
[0216] When the user receives digital content on y 
one generation copy of which is permitted and records io 
It to the HDD 905 in an encrypted form, the microcom- 
puter 804 sequentially copies data blocks of the digital 
content which con^espond to the predetermined broad- 
cast time period and at the same time nullifies the copied 
data blocks on the HDD 905 so that they cannot be re- '3 
produced 

[0217] FIG. 7 Is a functional block diagram of the re- 
ceptlon/reproductlon/nullif ication device of the third em- 
bodiment. 

[0216] ^his reception/reproduction/nuilification de- 20 
vice 300 Includes the user interface unit 1 01 , the receiv- 
ing unit 102, the descrambiing unit 103, the key gener- 
ating unit 1 04, the data encrypting unit 1 05, the key en- 
crypting unit 106, the recording unit 107. the key de- 
crypting unit 108, the data decrypting unit 109. the re- 25 
producing unit 110, a moving unit 301, a nullltication 
Judging unit 302, the processing capacity Judging unit 
112, the sequential nullifying unit 113, and the total nul- 
lifying unit 114. In actuality, the function of the receiving 
unit 1 02 corresponds to the function of the reception de- so 
vice 902 shown in FIG. 1 . The function of the descram- 
biing unit 103 corresponds to the function of the trans- 
port stream decoder 801 In FIG. 1 . The functions of the 
key generating unit 104, data encrypting unit 105. key 
encrypting unit 106, recording unit 107, key decrypting ss 
unit 1 08, and data decrypting unit 1 09 correspond to the 
function of the encrypting engine 803 in FIG. 1. The 
function of the reproducing unit 11 0 corresponds to the 
function of the AV decoder 802 in FIG. 1 . The functions 
of the moving unit 301 , nullification Judging unit 302» 
processing capacity Judging unit 112, sequential nullify- 
ing unit 113, and total nullifying unit 114 con'espond to 
the function of the microcomputer 804 in FIG. 1 . 
[0219] Construction elements which are the same as 
those In the first embodiment are given the same refer- ^5 
ence numerals and their explanation has been omitted. 
[0220] The moving unit 301 moves pairs of encrypted 
data blocks and encrypted decryption keys which have 
been recorded on the recording medium, sequential !y 
to another recording medium. The movement referred so 
to here is an operation of (1) copying data from one re- 
cording medium to another recording medium and (2) 
rewriting data management Intonnation of the data on 
the original recording medium to show that the data has 
been deleted, without deleting the data itself on the orig- 55 
Inal recording medium. In the present example, pairs of 
encrypted data blocks corresponding to the broadcast 
time period of 10 minutes and encrypted unique keys 



which are recorded on the IHDD 905 are moved one by 
one to another recording medium. 
[0221] The nullification Judging unit 302 operates as 
follows. When digital content Is recorded to one record- 
ing medium and then further recorded to another record- 
ing medium despite that only one generation copy of the 
digital content Is pemiitted, the nullification judging unit 
302 Judges whether the digital content should be nulli- 
fied, based on a specific condition. In the present exam- 
ple, the nullification Judging unit 302 Judges, for each 
pair of encrypted data block corresponding to the broad- 
cast time period of 10 minutes and encrypted unique 
key, whether the pair should be nullified. 
[0222] The specific condition here Is whether the pair 
has been moved by the moving unit 301. 

(Operation) 

[0223] FIG. 8 shows an example operation of the re- 
ception/reproduction/nullif ication device 300 of the third 
embodiment. 

[0224] IMovement and nullification of the present in- 
vention are explained by refen^lng to FIG. 8. 
[0225] Suppose scrambled digital content whose 
copy control infomnation is "Copy one Generation" is re* 
celved. and a plurality of pairs of encrypted data blocks 
con'espond ing to the predetennlned broadcast time pe- 
riod and encrypted unique keys are recorded on the 
HDD 905 with copy control Infonnation "Copy No more". 

(1 } In the stopped state, the user interface unit 1 01 
waits for the user's indication to move digital content 
(S31). 

(2) Upon receiving the move Indication (S31:Yes), 
the nuiilflcatlon Judging unit 302 Judges whether the 
digital content Is copy-prohibited, by referring to its 
copy control infonnation (S32}. 

(3) if the digital content is not copy-prohibited (532: 
No), the moving unit 301 moves all pairs of encrypt- 
ed data blocks and encrypted decryption keys of the 
digital content to another recording medium (S33). 

(4) If the digital content Is copy-prohibited (e.g. if the 
copy control information is "Copy No more") (S32: 
Yes), the moving unit 301 moves one pair of en- 
crypted data block and encrypted decryption key to 
another recording medium. In the present example, 
one pair of encrypted data block corresponding to 
the broadcast time period of 10 minutes and en- 
crypted unique key which are recorded on the HDD 
905 Is moved to another recording medium. 

(5) The nuiilflcatlon Judging unit 302 Judges whether 
there is any pair which has been moved but not 
been nullified (S35). 

(6) If there is any pair which has been moved but 
not been nullified (S35:Yes). the sequential nullify- 
Ing unit 113 nullifies the pair (536). 

(7) It Is Judged v/hether all pairs of encrypted data 
blocks and encrypted decryption keys have been 
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moved (S37). 

(8) If all pairs have been moved (S37:Yes), the total 
nullifying unit 114 destroys all remaining data which 
has not been destroyed by the sequential nullifying 
unit 113 (538). 

[0226] According to the third embocimert of the In- 
vention, copy-prohibited digital content can be moved 
to another recording medium but the d.gitai content re- 
corded on the original recording medium is then prompt- 
ly nullified. This enables user-frlendiiness to Improve 
without departing from the principle of copy prohibition. 
[0227] The first to third embodlmerts describe the 
case where a different encryption key Is generated for 
each data biocl< corresponding to the predetermined 
broadcast time period. However, a plurality of data 
blocl<s may be encrypted using the same encryption 
key. Also, the predetennined broadcast time period Is 
not limited to the above example but may be in any 
length. Furthermore, digital content which is recorded 
on the same recording medium may be encrypted using 
a single encryption key unique to the recording medium. 
[0228] The first to third embodlmerts describe the 
case where only decryption keys are sequentlaiiy de- 
stroyed when there Is not an enough processing capac- 
ity. However, when the same key Is used for encrypting 
a plurality of data blocks as ment oned above, It a de- 
cryption key of one data block is destroyed, the other 
data blocks that use the same decryption key cannot be 
decrypted. In this case, the decryption key is not de- 
stroyed and Instead the data blocks that use the decryp- 
ts n key are partly or completely destroyed. The decryp- 
tion key can be destroyed after the data blocks that use 
the same decryption key are nullified. 
[0229] Also, since data Is usually recorded and man- 
aged In the form of files, each pair of encrypted data 
block and encrypted decryption key may be recorded as 
a file or a plurality of pairs may be recorded as a file. 
When each pair Is recorded as an Individual file, nullifi- 
cation can be performed in units of files. However, when 
a plurality of pairs are recorded as a single file, nullifica- 
tion needs to be performed for part of the file. In such a 
case, access to the nullified part should be restricted so 
as to keep the nullified part from being accessed by mis- 
take. Access to part of a file can be restricted by, for 
example, using a seek restriction function of a file point- 
er mounted on a typical operating system. 
[0230] In the second embodiment, the plurality of re- 
cording areas reserved by the recording unit 201 need 
not be consecutive. As one example. AV data of 4Mbps 
Is 300MB per ten minutes. It is not efficient to reserve 
consecutive recording areas that can store such an 
amount of data on the HDD. In this case, each recording 
area Is made up of a plurality of small consecutive areas. 
The relationship between each recording area and its 
small consecutive areas Is Independently managed by 
a file system, which provides each recording area to 
higher applications as a consecutive recording area to 



realize access using a file pointer 
[0231] Programs that can execute the operations of 
the first to third embodiments on computer may be re- 
corded on computer-readable recording media and dis- 
& tributed for transaction. Such programs may also be dis- 
tributed via network. 

[0232] Examples of the computer-readable recording 
media include a removable recording medium such as 
a floppy disk, a CD, an MO, a DVD, or a memory card, 
to and a fixed recording medium such as a hard disk and 
a semiconductor memoiy. 

[0233] Although the present Invention has been fully 
described by way of examples with reference to the ac- 
companying drawings, it Is to be noted that various 
t5 changes and modtticattons will be apparent to those 
skilled In the art. 

[0234] Therefore, unless such changes and modifica- 
tions depart from the scope of the present invention, 
they should be construed as being included therein. 

20 

Claims 

1 . A data nullification device for nullifying target data 
25 recorded on a recording medium, the target data 
being made up of a plurality of data blocks, the data 
nullification device comprising: 

a Judging unit operable to Judge, for each data 
so block recorded on the recording medium, 

whether the data block needs to be nullified; 
and 

a nullifying unit operable to nullify, when a pre- 
determined number of data blocks are judged 
35 as needing to be nullified or when ore or more 

data blocks whose total amount of data reaches 
a predetennined amount are judged as needing 
to be nullified, the Judged data blocks. 

40 2. The data nullification device of Claim 1 , 

wherein the recording medium stores se- 
quence Information that shows a sequence In which 
the plurality of data blocks were recorded onto the 
recording medium, and 

the Judging unit judges, in succession, the plu- 
rality of data blocks In the sequence shown by the 
sequence Infonnation, as needing to be nullified. 

3. The data nullification device of Claim 2, 
50 wherein the target data is data which is con- 

tinuously transmitted from an external device and 
recorded on the recording medium, 

the data nullification device further comprises: 

55 a receiving unit operable to receive data from 

the extemal device, and 
having set the received data as a new data 
block, the nullifying unit writes the new data 
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block to a recording area on the recording me- 
diunn that stores a data block which Is Judged 
as needlngto be nullified, to nu Itfy the recorded 
data block and at the same time record the new 
data block. 

4. The data nullification device of Claim 3, 

wherein each data bl(x^k has a length corre- 
sponding to a fixed transmission time period, ano 

a specified number of recording areas which 
are each used as a recording area of a data block 
are reserved on the recording medium. 

5. "^he data nullification device of Claim 4, 

wherein If the length corresponding to the 
fixed transmission time period is variable and If part 
of the recorded data block remains even after the 
new data block Is written, the nullifying unit further 
writes arbitrary data over the part of the recorded 
data block. 

6. The data nullification device of Claim 4, 

wherein if there is not a new data block which 
Is to be recorded, the nullifying unit writes arbitrary 
data to the recording area. 

7. The data nullification device of Claim 2, further com- 
prising: 

a utilizing unit operable to utilize the target data 
recorded on the recording medium, in units of 
data blocks, 

wherein the judging unit further Judges that 
each data block which was utilized by the utilizing 
unit needs to be nullified. 

8. The data nullification devtee of Claim 7, 

wherein the target data is content data whteh 
is transmitted from an external device and recorded 
on the recording medium, 

the content data Is accompanied with copy 
control information showing whether copying of the 
content data Is permitted or prohibited. 

the utilizing unit reproduces the content data 
recorded on the recording medium, in units of data 
blocks, and 

only if the copy control Infomnatlon accompa- 
nying the content data shows that the copying of the 
content data is prohibited, the judging unit judges 
that each data block which was reproduced by the 
utilizing unit needs to be nullified. 



retention of the data block on the recording medium 
Is prohibited, 

the judging unit Judges that each data block 
whose recording time limit Is reached needs to be 
5 nullified, based on the time limit infonnatlon, and 

v/henever any data block Is Judged as needing 
to be nullified because a recording time limit of the 
data block Is reached, the nullifying unit nullifies the 
data block Irrespective of whether the predeter- 
^0 mined number of data blocks are Judged as needing 
to be nullified or whether one or more data blocks 
whose total amount of data reaches the predeter- 
mined amount are Judged as needing to be nui ified. 

*5 10. The data nullification device Of Claim 9, further com- 
prising: 

a utilizing unit operable to utilize the target data 
recorded on the recording medium, in units of 
^ data blocks, 

vmereln the judging unit further judges that 
each oata block which was utilized by the utilizing 
unit needs to be nullified. 

25 

11. The data nullification device of Claim 10, 

wherein the target data is content data which 
Is transmitted from an external device and recorded 
on the recording medium, 
^0 the content data is accompanied with copy 

control informatbn showing whether copying of the 
content data Is permitted or prohibited, 

the utilizing unit reproduces the content data 
recorded on the recording medium, In units of data 
^3 blocks, and 

only if the copy control Infonnation accompa- 
nying the content data shows that the copying of the 
content data is prohibited, the judging unit Judges 
that each data block which was reproduced by the 
40 utilizing unit needs to be nullified. 

12. The data nullification device of Claim 1 , further com- 
prising: 

a utilizing unit operable to utilize the target data 
recorded on the recording medium, in units of 
data blocks, 

v/herein the judging unitjudges that each data 
^0 block which was utilized by the utilizing unit needs 
to be nullified. 

13. The data nuilification device of Claim 12, 
wherein the target data Is content data which 

is transmitted from an external device and recorded 
on the recording medium, 

the content data is accompanied with copy 
control information showing whether copying of the 



9. The data nuilification device of Claim 1 , 

wherein the recording medium stores time 55 
limit infonnation showing a recording time limit of 
each data block recorded on the recording medium, 
the recording time limit being a time limit after which 
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content data Is permitted or prohibited, 

the utilizing urit reproduces the content data 
recorded on the recording medium, In units of data 
blocl<s, and 

only If the copy control Infomnatlon accompa- 
nying the content data shows that the copying of the 
content data Is prohibited, the judging unit judges 
that each data block which was reproduced by the 
utilizing unit needs to be nullified, 

14. The data nullification device ot Claim 12, 

wherein the target data is accompanied with 
copy control information showing whether copying 
of the target data is permitted or prohib ted, 

the utilizing unit records the target data re- 
corded on the recording medium, to another record- 
ing medium, in units of data bloclcs, and 

only If the copy control Information accompa- 
nying the target data shows that the copying of the 
target data Is p roh ibited , th e Ju dg I n g unit j udges that 
each data block on the recording medium which 
was recorded by the utilizing unit needs to be nulli- 
fied. 

15. The data nullification device of Claim 1 , 

wherein the nullifying unit destroys ail parts of 
a data block which Is Judged as needing to be nul- 
lified. 

16. The data nullification device of Claim 1 , 

wherein the nullifying unit destroys at least a 
part of a data block which is judged as needing to 
be nullified, the part of the data block being neces- 
sary to utilize remaining parts of the data block. 

17. The data nullification device of Claim 1 6, 

wherein the target data is MPEG data includ- 
ing i pictures, and 

the part of the data block necessary to utilize 
the remaining parts of the data block is an i picture. 

18. The data nullification device of Claim 1 6, 

wherein the target data Is MPEG data includ- 
ing I pictures, and 

the part of the data block necessary to utilize 
the remaining parts of the data block is a first sector 
of an 1 picture. 

19. ~!~he data nullification devk:e of Claim 1 6. 

wherein when the data nullification device 
does not have an enough processing capacity, the 
nullifying unit destroys only the part of the data block 
necessary to utilize the remaining parts of the data 
block. 

20. The data nullification device of Claim 19, 

wherein the nullifying unit destroys the re- 
maining parts of the data block within a range vfhere 



a processing capacity of the data nullification device 
allows. 

21. The data nullification device of Claim 19, further 
5 comprising: 

a destroying unit operable to destroy remaining 
parts of data blocks which were not destroyed 
by the nullifying unit, when the data nullification 
device has an enough processing capacity. 

22. The data nullification device of Claim 1, 
v/herein each data block recorded on the re- 
cording medium has been encrypted using an indi- 
vidual encryption key, 

a decryption key for decrypting the encrypted 
data block Is stored on the recording medium, and 
the nullifying unit destroys at least a decryp- 
tion key corresponding to a data block whicii is 
Judged as needing to be nullified. 

23. The data nullification device of Claim 22, further 
comprising: 

an acquiring unit operable to acquire the target 
data in an encoded fomi; 
a decoding unit operable to decode the encod- 
ed target data using a user key which has been 
provided to authorized users in advance, to ob- 
tain the target data; 

a key generating unit operable to generate an 
arbitrary encryption key and a decryption key 
corresponding to the encryption key, for each 
data block of the target data; 
a data encrypting unit operable to encrypt the 
data block using the encryption key so that the 
encrypted data block can be decrypted using 
the corresponding decryption key; 
a key encrypting unit operable to encrypt the 
decryption key using an Identifier unique to the 
data niiiiification device; and 
a recording unit operable to record the encrypt- 
ed data block and the encrypted decryption key 
onto the recording medium. 

24. The data nullification device of Claim 23, 
wherein at least the decoding unit, the key 

generating unit, the data encrypting unit, and the 
key erurrypting unit are contained in a single semi- 
conductor chip. 

25. A data nullification program for nullifying target data 
recorded on a recording medium, the target data 
being made up of a plurality of data blocks, the data 
nullification program having a computer execute the 
steps of: 

judging, for each data block recorded on the re- 
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cording medium, whether the data block needs 
to be nullified; and 

nullifying, when a predetermined number of da- 
ta blocks are Judged as needing to be nullified 
or when one or more data blocks whose total 
amount of data reaches a predetermined 
amount are Judged as needing to be nullified, 
the Judged data blocks. 

26. The data nullification program of Claim 25, 

wherein the recording medium stores se- 
quence Information that shows a sequence in which 
the plurality of data blocks were recorded onto the 
recording medium, and 

the Judging step Judges, in succession, the 
plurality of data blocks in the sequence shown by 
the sequence Information, as needing to be nulli- 
fied. 

27. The data nullification program of Claim 26, 

wherein the target data is data which is con- 
tinuously transmitted from an external device and 
recorded on the recording medium, 

the data nullification program further having 
the computer execute the step of: 



data block Irrespective of whether the predeter- 
mined number of data blocks are Judged as needing 
to be nullified or whether one or more data blocks 
whose total amount of data reaches the predeter- 
5 minedamountarejudged as needing to be nul ified. 

30. The data nullification program of Claim 29, further 
having the computer execute the step of: 

10 utilizing the target data recorded on the record- 

ing medium, in units of data blocks, 

wherein the judging step further Judges that 
each data block which was utilized In the utilizing 

19 step needs to be null fled. 

31. The data nullification program of Claim 25, further 
having the computer execute the step of: 

20 utilizing the target data recorded on the record- 
ing medium, in units of data blocks, 

wherein the Judging step Judges that each da- 
ta block which was utilized in the utilizing step needs 
25 to be nullified. 



receiving data from the external device, 

wherein having set the received data as a new 
data block, the nullifying step writes the new data 
block to a recording area on the recording medium 
that stores a data block which Is Judged as needing 
to be nullified, to nullify the recorded data block and 
at the same time record the new data block. 

28. The data nullification program of Claim 26, further 
having the computer execute the step of: 

utilizing the target data recorded on the record- 
ing medium, in units of data blocks, 

wherein the judging step further ,udges that 
each data block which was utilized in the utilizing 
step needs to be nullified. 

29. The data nullification program of Claim 25, 

wherein the recording medium stores time 
limit infonnation showing a recording time limit of 
each data block recorded on the recording medium, 
the recording time limit being a time limit after whteh 
retention of the data block on the recording medium 
is prohibited, 

the Judging step judges that each data block 
whose recording time limit Is reached needs to be 
nullified, based on the time limit information, and 

wheneverany databiock is judged as needing 
to be nullified because a recording time limit of the 
data block Is reached, the nuIliVlng step nullifies the 



32. The data nullification program of Claim 25, 

wherein the nullifying step destroys all parts 
of a data block which Is judged as needing to be 
30 nullified. 

33. The data nullification program of Claim 25, 

wherein the nullifying step destroys at least a 
part of a data block which is Judged as needing to 
55 be nullified, the part of the data bIocl< being neces- 
sary to utilize remaining parts of the data block. 

34. The data nullification program of Claim 25, 

wherein each data block recorded on the re- 
40 cording medium has been encrypted using an Indi- 
vidual encryption key, 

a decryption key for decrypting the encrypted 
data block Is stored on the recording medium, and 
the nullifying step destroys at least a decryp- 
ts tlon key corresponding to a data block which is 
Judged as needing to be nullified. 

35. A data nullification method for nullifying target data 
recorded on a recording medium, the target data 

50 being made up of a plurality of data blocks, the data 
nulllftoation method comprising the steps of: 

Judging, for each data block recorded on the re- 
cording medium, whether the data block needs 
ss to be nullified; and 

nullif^ng. when a predetermined number of da- 
ta blocks are Judged as needing to be nullified 
or when one or more data blocks whose tota; 
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amount of data reaches a predetermined 
amount are Judged as needing to be nullified, 
the Judged data blocks. 

36. The data nullification method of Claim 35, 

wherein the recording meoium stores se- 
quence information that shows a sequence In which 
the plurality of data bloclcs were recorded onto the 
recording medium, and 

the Judging step Judges, In succession, the 
plurality of data blocks In the sequence shown by 
the sequence Information, as needing to be nulli- 
fied. 

37. The data nullification method of Claim 36, 

wherein the target data Is data which is con- 
tinuously transmitted from an external device and 
recorded on the recording medium, 

the data nullification method further compris- 
ing the step of: 

receiving data from the external device, 

wherein having set the received data as a new 
data block, the nullifying step writes the new data 
block to a recording area on the recording medium 
that stores a data block which Is Judged as needing 
to be nullified, to nullify the recorded data block and 
at the same time record the new data block. 

38. The data nuillfication method of Claim 36, further 
comprising the step of: 

utilizing the target data recorded on the record- 
ing medium, in units of data blocks, 

wherein the Judging step further judges that 
each data block which was utilized in the utilizing 
step needs to be nullified. 

39. The data nullification method of Claim 35, 

wherein the recording medium stores time 
iimft information showing a recording time limit of 
each data block recorded on the recording medium, 
the recording time limit being a time limit after which 
retention of the data block on the recording medium 
is prohibited, 

the Judging step Judges that each data block 
whose recording time limit is reached needs to be 
nullified, based on the time limit information, and 

whenever any data block is Judged as needing 
to be nullified because a recording time limit of the 
data block is reached, the nullifying step nullifies the 
data block Irrespective of whether the predeter- 
mined number of data blocks are Judged as needing 
to be nullified or whether one or more data blocks 
whose total amount of data reaches the predeter- 
mined amount are Judged as needing to be nullified. 



40. Ttie data njlliflcation method of Claim 39, further 
comprising the step of: 

utilizing the target data recorded on the record- 
s ing medium, In units of data blocks, 

v/herein the Judging step further judges that 
each data block which was utilized in the utilizing 
step needs to be nullified. 

10 

41. The data njlliflcation method of Claim 35, further 
comprising the step of: 

utilizing the target data recorded on the record- 
ing medium, In units of data blocks, 

wherein the judging step judges that each da- 
ta block which was utilized In the utilizing step needs 
to be nullified. 

20 

42. The data nullification method of Claim 35, 

wherein the nullifying step destroys all parts 
of a data block which Is Judged as needing to be 
nullified. 

25 

43. The data nullification method of Claim 35, 

wherein the nullifying step destroys at least a 
part of a data block which Is Judged as needing to 
be nullified, the part of the data block being neces- 
30 sary to utilize remaining parts of the data block. 

44. The data nullification method of Clabn 35, 

wherein each data block recorded on the re- 
cording medium has been encrypted using an indi- 
es vidual encryption key, 

a decryption key for decrypting the encrypted 
data block is stored on the recording medium, and 
the nullifying step destroys at least a decryp- 
tion key corresponding to a data block which is 
40 judged as needing to be nullified. 
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